Updated readme with security warning (CSRF)